Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
File: ngV1AShe0hwz2zraRFXEykfdTpA.mft (raw, json)
Hash identifier: 1jW4r7SVJ2jEBUDYnOLembqI5/cEHzJkC4GB9Yq8MIs=
Subject key identifier: 13:4D:C0:06:5A:0C:D7:D2:06:FD:C6:86:26:92:2B:22:71:E2:8B:13
Authority key identifier: 9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
Certificate issuer: /CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Certificate serial: 0198D8507FF2CD02C93D3196769C6403E44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
Manifest number: 06B9
Signing time: Sat 23 Aug 2025 19:03:30 +0000
Manifest this update: Sat 23 Aug 2025 19:03:30 +0000
Manifest next update: Sun 24 Aug 2025 19:03:30 +0000
Files and hashes: 1: ngV1AShe0hwz2zraRFXEykfdTpA.crl (hash: Y5iyHKIkrTAnPJO0ucHuBJBIC3pqya16BVz9FnyLVVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:7f:f2:cd:02:c9:3d:31:96:76:9c:64:03:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Validity
Not Before: Aug 23 19:03:30 2025 GMT
Not After : Aug 24 19:03:30 2025 GMT
Subject: CN=134dc0065a0cd7d206fdc68626922b2271e28b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:fc:14:5c:9c:bd:97:e8:ce:47:84:f1:12:
26:6c:83:e2:68:c8:10:c5:a1:f0:c5:99:94:60:68:
61:61:36:05:2c:38:fe:e8:17:f1:6f:12:20:06:d2:
5b:5e:61:07:d1:2b:bc:9b:4f:7a:c5:b7:28:27:2e:
45:2f:ad:9c:0d:68:9f:96:ba:05:50:ac:87:9c:af:
86:cb:06:f1:a2:ba:e1:38:72:72:c5:98:68:16:83:
7e:dc:47:46:d4:c6:de:1c:dc:b3:97:95:50:77:53:
f5:1c:d3:9d:84:90:41:1c:2c:78:e2:08:18:b4:31:
91:d9:93:93:e3:cc:18:16:22:5b:6b:e6:8e:83:b1:
e9:38:7d:2f:ba:97:46:48:e9:a4:94:76:76:4b:53:
56:17:19:f2:a2:f1:cc:31:63:50:2a:8b:bf:6d:19:
df:cb:f0:27:75:bd:d8:e8:d4:ec:9a:70:f7:f5:ac:
fd:ea:16:44:1b:dd:ae:68:0b:8a:5a:d4:3d:a3:c3:
32:17:d4:6f:40:e3:e1:e2:1c:85:4c:4a:48:95:07:
40:b5:17:31:1e:7c:96:fa:e1:91:6c:de:4f:75:6f:
eb:79:2b:38:8e:38:0a:46:de:b6:65:c2:ff:5a:f8:
d7:96:33:f6:f8:39:99:15:36:db:ea:d6:81:76:f6:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:C0:06:5A:0C:D7:D2:06:FD:C6:86:26:92:2B:22:71:E2:8B:13
X509v3 Authority Key Identifier:
keyid:9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:3f:1f:de:b6:1b:84:1f:72:e4:f3:c5:80:0d:52:ad:af:
88:93:fd:82:6c:86:4e:50:ef:76:db:6d:41:a2:84:04:59:43:
24:1c:f6:c4:4e:54:58:a7:02:20:e3:41:83:99:50:b4:d0:19:
bd:ac:50:1b:02:41:4c:96:4b:59:95:22:e7:c7:19:44:f6:a0:
a0:ae:87:6b:d1:e3:dc:2d:2d:bc:4d:90:7c:10:06:45:58:13:
62:64:29:11:1b:2e:10:a7:bf:ff:29:81:d0:d0:b5:cd:19:52:
13:87:29:a3:f0:f5:1d:42:42:b6:81:f1:7f:8d:3d:d9:4f:3f:
d6:bc:e8:96:9e:9f:27:a6:00:6c:2f:ee:08:f2:47:81:3c:39:
d6:ba:b7:c8:c6:cf:a3:4c:ad:c8:30:54:d7:f5:d1:89:b0:63:
69:62:f5:0f:bb:76:e0:a3:d0:71:a0:e0:7a:a6:6b:2c:4a:72:
51:8c:62:49:a3:92:40:b7:44:26:f4:d8:11:80:de:03:3a:b0:
97:67:22:d3:f0:22:2e:30:90:45:ef:60:ed:66:34:18:8f:7f:
dd:73:98:8d:c7:e5:55:1e:ae:fd:ab:c4:d5:f6:ff:12:a4:84:
85:f9:61:0b:f7:e5:4a:4b:ac:de:08:04:0c:5d:69:26:a3:b0:
13:35:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:17:00 2025 by rpki-client